<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">(22/01/14 10:59), Kausik Chattopadhyay
wrote:<br>
</div>
<blockquote
cite="mid:1390388342.78457.YahooMailNeo@web141405.mail.bf1.yahoo.com"
type="cite">
<div style="color:#000; background-color:#fff;
font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial,
Lucida Grande, sans-serif;font-size:12pt">
<div><span>Hi,</span></div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida
Grande', sans-serif; background-color: transparent;
font-style: normal;"><span>Thanks for the input. However, </span><span
style="background-color: transparent;">I checked that the
file exists and "rabbitmq:rabbitmq" is the owner.</span></div>
</div>
</blockquote>
The rabbitmq user needs to have permissions to access the *entire*
path. So, usually <tt>/root</tt> only allows root to access items
within that directory (the rather bizarrely chosen "executable"
permission on the directory). Try running "<tt>sudo -u rabbitmq
namei /root/testca/cacert.pem</tt>" to see this in action. It's
probably more sensible however to put the certificate somewhere
under <tt>/etc</tt>, eg: <tt>/etc/rabbitmq</tt> or similar.<br>
<br>
<blockquote
cite="mid:1390388342.78457.YahooMailNeo@web141405.mail.bf1.yahoo.com"
type="cite">
<div style="color:#000; background-color:#fff;
font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial,
Lucida Grande, sans-serif;font-size:12pt">
<div style="background-color: transparent;"><span style="color:
rgb(0, 0, 0); font-family: HelveticaNeue, 'Helvetica Neue',
Helvetica, Arial, 'Lucida Grande', sans-serif; font-size:
16px; font-style: normal;">Interestingly, this is the log
from </span><span style="background-color: transparent;"><a class="moz-txt-link-abbreviated" href="mailto:rabbit@master1-sasl.log">rabbit@master1-sasl.log</a></span></div>
<div><span style="background-color: transparent; font-size:
12pt;"><br>
</span></div>
<div><span style="background-color: transparent; font-size:
12pt;"><br>
</span></div>
<div style="background-color: transparent;">=CRASH REPORT====
22-Jan-2014::08:48:51 ===</div>
<div style="background-color: transparent;"> crasher:</div>
<div style="background-color: transparent;"> initial call:
ssl_connection:init/1</div>
<div style="background-color: transparent;"> pid:
<0.8752.0></div>
<div style="background-color: transparent;"> registered_name:
[]</div>
<div style="background-color: transparent;"> exception exit:
ecacertfile</div>
<div style="background-color: transparent;"> in function
gen_fsm:init_it/6 (gen_fsm.erl, line 371)</div>
<div style="background-color: transparent;"> ancestors:
[ssl_connection_sup,ssl_sup,<0.228.0>]</div>
<div style="background-color: transparent;"> messages: []</div>
<div style="background-color: transparent;"> links:
[<0.231.0>]</div>
<div style="background-color: transparent;"> dictionary:
[{ssl_manager,ssl_manager}]</div>
<div style="background-color: transparent;"> trap_exit: false</div>
<div style="background-color: transparent;"> status: running</div>
<div style="background-color: transparent;"> heap_size: 1597</div>
<div style="background-color: transparent;"> stack_size: 24</div>
<div style="background-color: transparent;"> reductions: 1970</div>
<div style="background-color: transparent;"> neighbours:</div>
<div style="background-color: transparent;"><br>
</div>
<div style="background-color: transparent;">=SUPERVISOR
REPORT==== 22-Jan-2014::08:48:51 ===</div>
<div style="background-color: transparent;"> Supervisor:
{local,ssl_connection_sup}</div>
<div style="background-color: transparent;"> Context:
child_terminated</div>
<div style="background-color: transparent;"> Reason:
ecacertfile</div>
<div style="background-color: transparent;"> Offender:
[{pid,<0.8752.0>},</div>
<div style="background-color: transparent;">
{name,undefined},</div>
<div style="background-color: transparent;">
{mfargs,{ssl_connection,start_link,undefined}},</div>
<div style="background-color: transparent;">
{restart_type,temporary},</div>
<div style="background-color: transparent;">
{shutdown,4000},</div>
<div style="background-color: transparent;">
{child_type,worker}]</div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida
Grande', sans-serif; background-color: transparent;
font-style: normal;"><span> </span></div>
<div class="yahoo_quoted" style="display: block;"> <br>
<br>
<div style="font-family: HelveticaNeue, 'Helvetica Neue',
Helvetica, Arial, 'Lucida Grande', sans-serif; font-size:
12pt;">
<div style="font-family: HelveticaNeue, 'Helvetica Neue',
Helvetica, Arial, 'Lucida Grande', sans-serif; font-size:
12pt;">
<div dir="ltr"> <font face="Arial" size="2"> On
Wednesday, January 22, 2014 1:53 PM, Michael Klishin
<a class="moz-txt-link-rfc2396E" href="mailto:mklishin@gopivotal.com"><mklishin@gopivotal.com></a> wrote:<br>
</font> </div>
<div class="y_msg_container">On 22 Jan 2014, at 10:43,
Kausik Chattopadhyay <<a moz-do-not-send="true"
shape="rect" ymailto="mailto:connect_kausik@yahoo.com"
href="mailto:connect_kausik@yahoo.com">connect_kausik@yahoo.com</a>>
wrote:
<div class="yqt5301307877" id="yqtfd23110"><br
clear="none">
<br clear="none">
> {error,{badmatch,{error,eacces}}}
/root/testca/cacert.pem</div>
<br clear="none">
<br clear="none">
RabbitMQ could not read /root/testca/cacert.pem because
it does not exist<br clear="none">
or is not readable by the effective user (e.g.
rabbitmq).<br clear="none">
<br clear="none">
MK<br clear="none">
<br clear="none">
Software Engineer, Pivotal/RabbitMQ
<div class="yqt5301307877" id="yqtfd58289"><br
clear="none">
<br clear="none">
</div>
<br>
<br>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
rabbitmq-discuss mailing list
<a class="moz-txt-link-abbreviated" href="mailto:rabbitmq-discuss@lists.rabbitmq.com">rabbitmq-discuss@lists.rabbitmq.com</a>
<a class="moz-txt-link-freetext" href="https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss">https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss</a>
</pre>
</blockquote>
<br>
</body>
</html>